Re: Code review request, JDK-8052406, SSLv2Hello protocol may be filter out unexpectedly

2014-07-31 Thread Wang Weijun
On Jul 31, 2014, at 10:15, Xuelei Fan wrote: >> The server side now only enables TLS_RSA_WITH_AES_128_CBC_SHA256. If other >> protocols are enabled, Oh, typo. I meant to ask: "If other cipher suites are enabled, what will be the difference?" --Max >> what will be the difference? You mean TL

[JDK-9] RFR: 8050370: Need new regressions tests for messageDigest with DigestIOStream

2014-07-31 Thread zaiyao liu
May I request you to review 1 new test to be added for messageDigest with DigestIOStream. New test are added to address following: - Test DigestInputStream and DigestOutputStream digest function when digest set on and off - Test DigestInputStream and DigestOutputStream digest function when Swa

Re: RFR: 8042982: Unexpected RuntimeExceptions being thrown by SSLEngine

2014-07-31 Thread Bradford Wetmore
Rob, Looks ok to me too. There are probably other places with RTE's we could fix, but this will solve the immediate problem. Two comments to consider: 1. Use a Multi-catch exception. JDK7+. 2. DHCrypt throws IOException. ECDHCrypt throws SSLException (which is an IOException). Since D

Re: Java fails to read crendential cache which has ben obtained through a client keytab

2014-07-31 Thread Wang Weijun
Hi Michael We've recently fixed a bug where the principal name in ccache has no realm: http://bugs.openjdk.java.net/browse/JDK-8048073 8048073: Cannot read ccache entry with a realm-less service name Is this the same one? If not, can you send me a copy of your ccache? Thanks Max On Jul 31,

Java fails to read crendential cache which has ben obtained through a client keytab

2014-07-31 Thread Michael Osipov
Hi, I recently started using the client keytab feature MIT Kerberos introduced some time ago. While C based programs work fine with KRB5_CLIENT_KTNAME, Java is unable to read the credential cache created by that client keytab initiation code because some addtional marker principals are added.

Re: Re: getKDCFromDNS called too often

2014-07-31 Thread Michael Osipov
On Jul 31, 2014, at 5:11, Michael Osipov <1983-01...@gmx.net> wrote: > > > Am 2014-07-30 um 15:42 schrieb Wang Weijun: > >> > >> On Jul 29, 2014, at 1:01, Michael Osipov <1983-01...@gmx.net> wrote: > >> > >>> Moreover, I have access to My Oracle Support if necessary. > >> > >> I'll fix this bug